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AMENDMENTS TO THE CLAIMS 

Listiiis of claims: 

This listing of claims replaces all prior versions and Ustings of claims in the appUcation. 
1-22 (CaneeUed) 

23. (Cnrrently Amended) A data reproduction iqiparatus (200) deaypting encrypted content 
data to reproduce content data, comprising: 

a data leproduction unit (1500) to reproduce said encrypted content data, and 
a data storage unit (120) storing said encrypted content data and an encrypted content key 
that is a content key directed to decrypt said encrypted content data in an encrypted form 
deciyptable with a first deciyption key unicpie to said data reproduction unit, and providing said 
encrypted content data and said encrypted content key to said data reproduction unit, 
wherein said data reproduction unit comprises 

a session key generation unit (453© 15CI2) gMcrating a session key \xp6ated at every 
access to obtain said content key with respect to said data storage unit, 

a first encryption processing unit (4540 \5M> encrypting said session key using a pubUc 
encryption key that can be decrypted at said data storage unit and that is unique to said data 
storage unit, and providing said encrypted session key to said data storage unit. 
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a first decryption processing unit (1506) using said session key to decrypt said encrypted 
content key obtained fiom said data storage unft to an encrypted form with said session key. 

a first key hold unit (1540) pre-storing said first decryption key, 

a second decryption processtog unit (1530) extracting said content key by applying a 
decryption process on an output from said first decryption processing unit using said first 
decryption key stored in said first key hold unit, and 

a third decryption processtog unit (1520) receiving said encrypted content data read out 
fiom said data storage unit to decrypt said encrypted content data using a content key extracted 
by said second decryption processing unit to extract content data. 

24. (Pr^ausly Pmented) The data reproduction apparatus according to claim 23, said 
content data being coded audio data coded according to a coding scheme to reduce an amount of 
data, 

wherem said data reproduction unit compirlses 

an audio decodtog unit (1508) rcproducmg audio data based on said coding scheme from 

said coded audio data, and 

a digital-analog converter (1512) converting said reproduced audio data into an analog 

signal. 



Page 3 

PA6E3l27'R(»DATII16)20l)S4:43:1SPM[EastemlH^gMTiine]'^ 



VESTERMAN HATTORI 



0004/027 



ai 



Amendment 

Serial Na 10/069.118 

Attorney Docket No. 020234 

25. (Previously Pn»eiited) The data reproduction apparatus according to claim 23, 
wherein said data reproduction unit is pro vided m 

26. (Previously Presented) The data repioduction vpparBtm accordiiig to claim 23, 
vi^ietein said data stoiage unit (120) comprises 

I recoid unit (1412) to store data appUed to said data storage unit, 
t second key hold unit (1401) storing said public encryption key unique to said data 
stoiBge unit, and that can supply said public encryption key to said data reproduction unit. 

a third key hold unit (1 402) storing a second decryption key used to decrypt data 
encrypted with said public encryption key, 

a fourth decryption processing miit (1404) using said second decryption key to decrypt 
said first session key transmitted froin said datareproduction unit in an 

public oicryption key, and 

a second encryption processing unit (140S) encrypting encrypted content key stored in 
said recording unit using said first session key extracted at said fourth decryption processing unit 
for output. 

27. (Previously Presented) The data reproduction apparatus according to claim 23, 
wherein said data storage unit is detachable with respect to said data reproduction unit. 



Page 4 

PA(£4l27'RCVDATmil54:43:1SM[Easten)DayllgMTIiner8^^^ 



08/16/2005 15:47 FAX 202 822 1111 WESTERMAN HATTORI @005/027 



Amendment 

Serial No. 10/069,118 

Attomey Docket No. 020234 



28. (Previously Presented) A data leproduction apparatus (300. 400) deciypting 
eoctypted content data to reproduce content datai, comprising: 

a daa reproduction unit (1 500) deciypting said encrypted content data using a content key 
directed to decrypt said encrypted content data to reproduce content data, and 

a data storage unit (130, 140) storing said encrypted content data and said content key, 
and encrypting a first session key diflFering for every access to obtain said content key into a form 
deciyptable by a unique decryption key unique to said data reproduction unit for supply to said 

data reproduction unit, 

wherein said data reproduction unit comprises 

a first key hold unit (1540) prestoring said unique decryption key, 

afirst decryption processing unit(1530) qjplying a decryption processing using said 

unique decryption key which is an output from said first key hold unit. 

a first session key generation unit (1522) generating a second session key updated for 

every access to obtain said content key with respect to said data storage unit, 

a first encryption processing unit (1554) encrypting and applying to said data storage unit 

said second session key using a first session key that is encrypted hi a fi)im decryptable vdth said 

unique deciyption key supplied from said data storage unit and decrypted at said first decryption 

processing unit, and 
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a second decryption processing unit (1556) decrypting for said second session key said 
content key supplied from said data storage unit in an encrypted form decryptable by said unique 
decryption key and fiirther encrypted wth said second session key, 

said first decryption processing unit extracting said content key by applying a fiirther 
decryption process on the output ftom said second decryption proce^ 

decryption key, 

wherdn said data reproduction unit fiirther comprises a third deciypUon processing unit 
(1520) receiving said encrypted content data supplied from said data storage unit to decrypt said 
receive encrypted content data using a content key extracted by said first decryption processing 
unit to extract contiart data. 

29. (Previously Pivsented) The data reproduction apparatus according to claim 28, 
wherein said content data is coded audio data encoded by a coding scheme to reduce an 

amount of data, 

wh^on said data reproduction unit fiiither comprises 

an audio decoding unit reproducing audio data based on said coding method from said 
coded audio data, and 

a digital-analog converter converting said reproduced audio data into an analog signal. 
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30. (Previottsly Presented) TTie data reproduction apparatus according to claim 29. 
wherein said data leprodiiction unit has at least said firat key hold unit, said first decrw>tion 
processing unit, said second decryption processing unit and said third decryption processing unit 
provided in a security region that cannot be read out by a third party . 

31. (Previowly Presented) The data reproduction apparatus according to claim 28, 
wherein said data storage unit (130, 140) comprises 

a recording unit (1 412) to store data applied to said data storage unit, 

a second session key generation unit (1450) generating said first session key. 

a second encryption processing unit (1452) applying an encryption process using a public 
encryption key unique to said data reproduction unit and directed to apply encryption that can be 
decrypted with said unique decryption key, 

a fourth decryption processing unit (1454) using said fixst session key to decrypt said 
second session key transmitted fiom said data reproduction unit in an encrypted form vnth said 
first session key, and 

a third encryption processing unit (1456) carrying out an encryption process by said first 
sessk>n key extracted at said fourth decryption processing unit fbr output, 

said coment key stored in said recording unit being encrypted at said second encryption 
processing unit and fimhcr encrypted at said third enc ^tion processing unit to be supplied to 
said data reproduction unit. 
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32. (Previouslty^ Prwented) The data reproduction sq)paratus according to claim 28> 
wherein said.data storage unit is a menuMy card detachable witfi respect to said data reproduction 
unit 

33, (Previously Presented) The data reproduction s^paiatus according to claim 3 1 , 
further comprising an authentication data hold unit (1560) storing and supplying to said data 
storage unit authentication data unique to said data reproduction unit together with said public 
encryption key in an encrypted form dccryptablc by an authentication key at said data storage 
unit, 

wherein said data storage unit (140) comprises 

a fifth decryption processing unit (1 460) decrypting and extracting said authentication 
data and said public encryption key applied from said data reproduction unit in an encrypted form 
by said authentication key, and 

control means carrying out an authentication process to determine whether to output said 
content key to a data reproduction unit from which said authentication data is output based on 
said authentication data extracted by said fifth decryption processing unit 

34* (Prwiously Presented) A data reproduction apparatus (500, 600) decrypting 
encrypted content data to reproduce content data, comprising: 
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a data reproduction unit decrypting said encrypted content data using a content key 
directed to decrypt said encrypted content data to lepioduce content data, and 

a data storage unit (150, 160) storing said encrypted content data and said content key. 
and encrypting and supplying to said data reproduction unit a first session key differing for every 
access to obtain said encrypted content data in an encrypted form deciyptable by a unique 
decryption k?y unique to said data reproduction unit, 
Mdieiein said data reproduction tmit comprises 
a key hold unit (1 540) prestoring said unique decryption key, 
a first decryption processing unit (1 530) decrypting for said unique decryption key said 
first session key encrypted in a form decryptable witii said unique decryption key sapp^^ ftom 
said data storage unit for extraction, 

a session key generation unit (1 552) geneiaUng a second session key tqxlated for every 
access to obtain said content key with respect to said data storage unit, 

a first encryption processing unit (1 55 4) encrypting and providing to said data stomge 
unit said second session key by said first session key, 

a second decryption processing unit (1 556) decrypting for said second session key said 
content data supplied from said data storage unit in an encrypted form witix said second session 
key, and 
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a thiid decryption processing rniit (1 520) receiving said encrypted content data suppUed 
from said data storage unit based on an output of said second decryption process 

extract ccmtent data. 

35. (Previously Presented) The data reproduction apparatus according to claim 34. 
farther comprising an authentication data hold unit (1 560) storing, in an encrypted form 
decryptable an authentication key. a imblic eticryption 

said data reproduction unit and directed to apply encryption tiiat is deciyptable wth said unique 
decyption key and authentication data unique to said data reproduction unit, and that can output 
the stored pubUc encryption key and authentication data to said data storage unit 

36. (Previously Presented) The data reproduction apparatus according to daim 35, 
,^erein said data storage unit is detachable Mrith respect to said data reproduction apparams. 

37. (Previously Presented) The data reproduction apparatus according to claim 34 
wheidn said content key is stored in said recording unit in an encrypted form decryptable vrith a 
prcdetemiined second decryption key by said data reproduction .qjparatus, 

vrherein said data reproduction unit farther comprises a fifth decryption processing unit 
(1 572) to carry out decryption using a predetermined second decryption key. 
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vrheKin said fifth deciyption processing unit receives as a decrypted resuh for said 
second session key by said second deciyption processing unit said content key supplied from said 
data storage unit in an encrypted form deciyptable with said second decryption key and further 
enaypted with said second session key, and deaypting said content key for said second 
deciyption key to provide the decrypted content key to said third deciyption processing unit. 

38. (Previous^ Presented) The data reproduction {q>paratus according to claim 34, 
wherein said data storage unit is detachable with respect to said data reproduction appaaSns. 

39. (Previously Prasented) Tlie data reproduction apparatus according to claim 34, 
further comprising an interfece for connection to a portable telephone network. 

40. (Previously Presented) The data reproduction ^aratus according to claim 39, 
fiirther comprising a conversation processing unit to cany out conversation via said interface. 

41. (Previonsly Presented) The data reproduction ^jparatus according to claim 34, 
wheiein said data storage unit is a memory card detachable with respect to said data reproduction 
unit 
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42. (PTBvioiufe' Presented) The data reproduction apparatus according to claim 34. 
Mmercin said data lepcoduction unit has at least said key hold unit, said first decryption 
processing unit, said second d^ryption processing unit and said third decryption processir^g unit 
provided in a security region that cannot be read out hy a third party. 

43. (Previously Presented) The data reproduction appai-atus according to claim 34, 
wherein said data storage unit (150, 160) comprises 

a recording unit (1412) to store data ^pUed to said data storage unit, 
a second session key generation unit (1450) generating said first session key, 
a second encryption processing unit (1452) encrypting said first session key gOTcrated at 
said second session key generation unit by a pubUc encryption key muque to said content data 
^production unit and directed to apply encryption that can be decrypted with said unique 
decryption key, 

a fourth decryption processing unit (154) to decrypt, using said first session key, said 
second session key transmitted fiom said data reproduction unit in an encrypted form with said 
first session key, and 

a third encryption processing unit (1456) flying an encryption process by said second 
session key extracted at said fourth decryption processing unit for output, 

wherein said content key stored in said recording unit is encrypted at said third encryption 
processing unit and suppUed to said data reproduction unit. 
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44* (Previously Presented) The data reproduction apparatus accoiding to claim 35, 
whmin said data storage unit (ISO, 160) comprises 

a recording unit (1412) to store data applied to said data storage unit, 

a fourth decryption processing unit (1460) decrypting using an authentication key said 
public enciyption key and said authentication data that are in an encrypted form decryptable by 
said authentication key to extract said public encryption key and said auAendcation data» 

a control unit (1420) providing control of an authentication piocess determining whether 
said content key is to be output or not to a data reproduction unit from which said authentication 
data is output based on said authentication data extracted at said fourth decryption processing 
unity 

a second session key generation unit (1450) generating said first session key, 

a second encryption processing unit (1452) encrypting said first session key generated at 
said second session key generation unit by said public encryption key wtiacted at said fourth 
decryption, using said first session key, processing unit, 

a fourth decryption processing unit (1454) to decrypt said second session key transmitted 
from said data reproduction unit in an encrypted form with said first session key, and 

a third encryption processing unit (1456) carrying out an encryption process with said 
second session key extracted at said fourdi decryption processing unit for output, 

v^hercin said content key stored in said recording unit is encrypted at said third encryption 
processing unit to be supplied to said data reproduction unit 
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45.(Previo«»lyFre.ent«d) a data leproduction module (1500) to be loaded in a data 
reproduction apparatus decrypting encrypted content data to reproduce content data, comprising: 

a first key hold unit (1 540) prestoring a first dewyption key unique to said data 
reproduction module» 

a first decryption processing unit (1530) decrypting for said iiist decryption key a first 
session key suppUed &om a source external to said data reproduction module in an encrypted 
form that can be decrypted with said second decryption key ft«r every access to obtain a content 
key which is a decryption key directed to decrypt said encrypted contem data, and extracting said 

decrypted first session key, 

a session key generation unit (1552) generating a second session key updated for every 
access to obtain said content key with reqK^^ to a source external t^ 

module, 

an encryption processing unit (1554) encrypting said second session key using said first 
session key for output to an external source to said data reproduction module, 

a second decryption processing unit (1556) using said second session key to decrypt said 
a,irtent key encrypted with said second session key and suppUed ftom «^ 

data reproduction module, and 
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a third decryption processing unit (1520) receiving and decrypting said enoypted content 
data supplied fiom an external source to said data reproduction module, based on an output of 
said second decryption processing unit to «!xtract content data. 

46. (Previously Presentwl) The data reproduction module according to claim 45, 
further comprising an authentication data hold unit (1 560) storing a pubUc encryption key unique 
to said data repro duction module and v.Wch is an encryption key that can be decrypted with said 
first decryption key and authentication data unique to said data reproduction module in an 
encrypted form that can be decrypted by an authentication key at an external source to said daU 
reproduction module, and that can output the stored public encryption key and authentication 
daia to an external source to said data reproduction module. 

47. (Previously Presented) The data reproduction module according to claim 45, 
vAerein said contsait key is inpm from an external source to said dain reprod^^^^ 
encrypted form with said second session key. and said second decryption processing mrit (1556) 
provides a decrypted result to said third decryption processing unit (1 520) as a content key 
directed to decrypt said encrypted content data. 

48. (Previously Preaented) The data reproduction module according to claim 45. 
wherein said content key is input fiom an external source to said data reproduction module in an 
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eiicm««l foim deciypuble ^th said first decryption key. and further encrypted ^th said second 
session key, 

wherein said first decryption processing unit decrypts using said first decryption key a 
content key in anencryptedtodecryptaWe^dthsaidfirst decryption^ 
said second decryption processing unit (1556) to extract and provide to said third decryption 
processing unit (1520) said content key. 

49 (Previously Presented) The data reproduction module according to claim 45, 
vAerein said content key is input from an external source to said data reproduction module in an 
encrypted form that can be decrypted ^th said second decryption key, and enc^ 

second sesaon key, 

wherein said data reproduction module fiirther comprises 
I second key hold unit (1570) prestoring said second decryption key. and 
: fourth decryption processing unit (1 572) using said second decryption key to decrypt 
said content key subjected to encryption that can be decrypted with said second decryption key 
output ftom said second decryption processing unit (1556) to extract and provide to said third 
decryption processing unit (1520) said content key. 

50. (Previously Presented) The data reproduction module according to claim 45, 
wherein said content data is coded data coded vdth a coding scheme to reduce an amount of data. 
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said data reproduction module fUrthe. comprising a decoding mut (1808) reproducing 
data based on said coding scheme fix>m said coded data. 

51. (Previously Presented) The data reproduction module according to claim 45, 
wherdn saidcontent data is c^ded audio datacoded^thacoding^ 

ofdata, 

said data reproduction module fiinher comprising: 

an audio decoding unit (1808) reproducing audio data based oa said coding scheme ftom 

said coded audio data, and 

a digital-analog converter (1512) comrcrting said rei«oduced audio data into analog 

signals, 

52. (Previously P«sented) Tlie data reproduction module according to claim 45, 
wherein said data reproduction module is a tamper resistance module. 

53. (Pt^ousIyPi^ented) A data reproduction apparatus (300. 400. 500. 600) to be 
loaded with a data recording apparatus (1 30, 1 40. 1 50, 1 60) storing encrypted conteirt data and a 
contentkey which is a decryptionkey directed to decrypt said encrypted content datato obtain 
contem data, and encryptingafirst session k^ differing for every accessto 

content data into a form decryptable with a unique decryption key unique to said data 
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reproduction apparatus, said date reproduction apparatus reproducing said encrypted content data 
stored in said data recording apparatus using a content key stored in said data record 

apparatus, comprising: 

a firet interfece (1200) to attach said data recording apparatus and carry out data transfer 

vnth said data recording apparatus, 

a key hold unit (1 540) prestoring a unique key unique to said data reproduction apparatus. 

a first decryption pioccssing unit (1530) using said unique decryption key to decrypt a 
first session key updated for every access to obtain said content key and suppUed ftom said data 
recording apparatus in an encrypted form that can be decrypted ydth said unique decryption key 
unique to said data reproduction apparatus, 

a session key generation unit (1552) generating a second session key updated for every 
access to obtain said encrypted content key with respect to said data recording apparatus, 

an encryption processing unit (1554) encrypting said second session key using said first 
session key io supply said encrypted session key to said data recorduig apparatus, 

a second decryption processing unit (1556) using said second session k^ to decrypt said 
content key encrypted with said second session key and suppUed from said data recording 
apparatus, 

a third decryption processing unit (1 520) receiving and decrypting said encrypted content 
data read out from said data recordirig apparatus based on an output of said second decryption 
processing unit to extract content data. 
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54. (Previously Pw»ented) The data reproduction apparatus accoidiiig to claim 53. 
fiffther comprising an authentication data hold nnit (1560) storing apubUc encryption key vAiich 
is an encryption key unique to said data reproduction apparatus and decryptable with said first 
decryption key and authentication data unique to said data reproduction apparatus in an encrypted 
form that can be decrypted by an authentication key at said data recording apparatus, and 
providing the stored pubUc encryption key and authentication data to said data recording 
apparatus. 

55. (Pr«vloiisly Presented) The data reproduction !q»paratus according to claim 53, 
wherein said content key is encrypted with said second session key and supplied fiom said data 
recording apparatus (1 50), and said second decryption processing unit (1 556) provides a 
decrypted result to said third decryption processing unit (1520) as a content key directed to 
decrypt said enoypted content data. 

56- (Previously Presented) The data reproduction apparatus according to claim 53. 
wherdn said content key is encrypted in a form decryptable with said first decryption key, and 
encrypted with said second session key to be supplied fiom said data recording apparatus (130. 
140). 
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wherein said first deciyption processing unit uses said first decryption key to decrypt an 
encrypted conteirt key that can be deciypted v«th sdd first deciypti^^ 
said second decryption processing unit (1556) to extract eaod provide to said third decryption 
processing unit (1520) said content key. 

57. (Previously Presented) The data reproduction apparatus according to claim 53, 
wherein said oonteirt key is encrypted in a form deciyptable with said second decryption key, and 
encrypted with said second session key to be suppUed fiom said data recording apparatus (1 60), 
said data reproduction sqiparatus fiiilher comprising: 
I second key hold writ (1570) prcstoring said second decryption key, and 
t fi)urth decryption processing unit (1 572) using said second decryption key to decrypt 
said content key in an encrypted form decrypUble with said second decryption key output from 
said second decryption processing unit (1556) to extract and provide to said third decryption 
processing unit (1 520) said content l»y. 

58. (Previously Presented) The data reproduction apparatus according to claim 53, 
wherein said content data is coded daU encoded by a coding scheme to reduce an amount of data, 

said data reproduction apparatus fiirther comprising a decoding unit (1808) reproducing 
data baaed on said coding scheme fiom said coded data. 
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59. (Pjwioosly Presented) Hie data reproduction apparatus according to claim 53, 
wherein said content data is coded audio data coded by a coding scheme to reduce an amount of 
data, 

said data leproductioD a^aratus comprising: 

an audio decoding unit (1 808) reproducing audio data based on said coding scheme ftwn 

said coded audio data, and 

a digital-analog converter (1512) converting said reproduced audio data into analog 

signals. 

60. (Previously Presented) The data reproduction jqjpaiatus according to claim 53, 
further comprising a second interface connected to a portable telephone network. 

61. (Previously Presented) The data reproduction apparatus according to claun 60, 
further comprising a conversation processing unit to cany out conversation via said second 
intet&ce. 

62. (Previously Prtsented) Hie data reproduction apparatus according to claim 53, said 
data reproduction apparatus comprising a security region that camwt be read out by a third party. 
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wherein at least said first key hold unit, said first decryption processing unit, said second 
deayption processing unit and said thiid decryption processing unit are provided in said security 
r^on. 

«3. (Previously Presented) The data reproduction apparatus according to claim 53, said 
data reproduction apparatus including a security region that cannot be read out by a thiid party. 

wherein at least said first key hold unit, said second key hold unit, said first decryption 
processing unit, said second decryption processing unit, said flurd deciyption processing unit, 
and said second decryption processing unit are provided in said security region. 
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